Open Intel60
HighThreat actor

Threat actor impersonates AI bot services scanning credentials

An attacker impersonated chatbot services from OpenAI, Anthropic, Meta and others to scan for exposed credentials. The attacker used fake bot identities to search databases and repositories for sensitive data. This technique exploits trust placed in major AI vendors to access information more easily. Organizations should monitor for unusual authentication attempts and review access logs for suspicious bot activity.

Source

AI-written summary. Check the original reporting before acting.